GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: grafana, tfsec, nfpm, osv-scanner, trivy-operator, bom, apko, kyverno, grafana-alloy, flux-source-controller, argo-workflows, dagger, syft, kaniko, k9s, wolfictl, zarf, argo-events, xeol, argo-cd, snyk-cli, kots, external-secrets-operator, crossplane, goreleaser,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: gitea-fips, k9s-fips, gitlab-runner, gitlab-rails-ce, argo-events, rancher-fleet-fips, nemo, grafana-alloy, packer-fips, grype-db, coder, flux-source-controller, redpanda-console, amazon-ssm-agent-fips, grype, skaffold-fips, kubevela-fips, kyverno-fips, skaffold,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: gitea-fips, k9s-fips, gitlab-runner, gitlab-rails-ce, argo-events, rancher-fleet-fips, nemo, grafana-alloy, packer-fips, grype-db, coder, flux-source-controller, redpanda-console, amazon-ssm-agent-fips, grype, skaffold-fips, kubevela-fips, kyverno-fips, skaffold,...

CLEANSTART-2026-FO49462 Security fixes for ghsa-3xc5-wrhm-f963 applied in versions: 1.31.1-r0

Security vulnerability affects the pulumi-language-yaml package. This issue is resolved in later releases. See references for vulnerability details...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-kms, verticadb-operator, blob-csi, newrelic-infrastructure-agent, crossplane-provider-azure-sql, cosign, syft, wolfictl, kubernetes-csi-external-provisioner, kubernetes-csi-external-resizer, argo-rollouts, metallb, step-issuer, argo-cd,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: ferretdb, k9s-fips, sftpgo-plugin-pubsub, gitlab-runner, azure-workload-identity-webhook, k6-fips, ceph-csi-operator-fips, packer-fips, jobset-fips, loki-fips, k8sgateway, grype-db, clickhouse-backup-fips, ld-relay-fips, grafana-rollout-operator,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: chezmoi, gitea-fips, k9s-fips, gitlab-runner, gitlab-rails-ce, argo-events, rancher-fleet-fips, nemo, grafana-alloy, packer-fips, grype-db, flux-source-controller, amazon-ssm-agent-fips, grype, skaffold-fips, kubevela-fips, kyverno-fips, skaffold,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: chezmoi, gitea-fips, k9s-fips, gitlab-runner, gitlab-rails-ce, argo-events, rancher-fleet-fips, nemo, grafana-alloy, packer-fips, grype-db, flux-source-controller, amazon-ssm-agent-fips, grype, skaffold-fips, kubevela-fips, kyverno-fips, skaffold,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: chezmoi, gitea-fips, k9s-fips, gitlab-runner, gitlab-rails-ce, argo-events, rancher-fleet-fips, nemo, grafana-alloy, packer-fips, grype-db, flux-source-controller, amazon-ssm-agent-fips, grype, skaffold-fips, kubevela-fips, kyverno-fips, skaffold,...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: grafana, tfsec, nfpm, osv-scanner, trivy-operator, bom, apko, kyverno, grafana-alloy, flux-source-controller, argo-workflows, dagger, syft, kaniko, k9s, wolfictl, zarf, argo-events, xeol, argo-cd, snyk-cli, kots, external-secrets-operator, chezmoi, crossplane,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: grafana, tfsec, nfpm, osv-scanner, trivy-operator, bom, apko, kyverno, grafana-alloy, flux-source-controller, argo-workflows, dagger, syft, kaniko, k9s, wolfictl, zarf, argo-events, xeol, argo-cd, snyk-cli, kots, external-secrets-operator, chezmoi, crossplane,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: grafana, tfsec, nfpm, osv-scanner, trivy-operator, bom, apko, kyverno, grafana-alloy, flux-source-controller, argo-workflows, dagger, syft, kaniko, k9s, wolfictl, zarf, argo-events, xeol, argo-cd, snyk-cli, kots, external-secrets-operator, chezmoi, crossplane,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: grafana, tfsec, nfpm, osv-scanner, trivy-operator, bom, apko, kyverno, grafana-alloy, flux-source-controller, argo-workflows, dagger, syft, kaniko, k9s, wolfictl, zarf, argo-events, xeol, argo-cd, snyk-cli, kots, external-secrets-operator, chezmoi, crossplane,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-kms, kubernetes-dashboard-api, verticadb-operator, terraform-provider-tls, blob-csi, crossplane-provider-aws-cloudformation, crossplane-provider-aws-kms, newrelic-infrastructure-agent, modelmesh-runtime-adapter, minio-object-browser, syft,...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: apko, crossplane-provider-aws-cloudformation, crossplane-provider-aws-kms, wolfictl, terraform-provider-acme, kube-logging-operator, datadog-agent, crossplane-provider-aws-ec2, goreleaser, flux-kustomize-controller, gitlab-pages, crossplane-provider-aws-route53,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: apko, crossplane-provider-aws-cloudformation, crossplane-provider-aws-kms, wolfictl, terraform-provider-acme, kube-logging-operator, datadog-agent, crossplane-provider-aws-ec2, goreleaser, flux-kustomize-controller, gitlab-pages, crossplane-provider-aws-route53,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: apko, crossplane-provider-aws-cloudformation, crossplane-provider-aws-kms, crossplane-provider-azure-sql, syft, wolfictl, atlantis, argo-rollouts, actions-runner-controller, argo-cd, external-secrets-operator, datadog-agent, crossplane-provider-aws-ec2, crossplane,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: apko, crossplane-provider-aws-cloudformation, crossplane-provider-aws-kms, crossplane-provider-azure-sql, syft, wolfictl, atlantis, argo-rollouts, actions-runner-controller, argo-cd, external-secrets-operator, datadog-agent, crossplane-provider-aws-ec2, crossplane,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: gitea-fips, k9s-fips, gitlab-runner, gitlab-rails-ce, argo-events, image-factory, rancher-fleet-fips, terraform-fips, actions-runner-controller, crossplane-provider-aws-iam-fips, crossplane-provider-aws-cloudwatchlogs, openbao-fips,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: ferretdb, prometheus-mysqld-exporter, prometheus-beat-exporter, prometheus-nats-exporter, flux-source-controller, cert-manager-fips, cluster-proportional-autoscaler, nri-kubernetes, datadog-agent-fips, secrets-store-csi-driver, skaffold, grpc-health-probe,...